The voluntary recommendations from the industry group, which aim to build consumer trust in companies that handle health and wellness data, are meant to supplement, not supplant, existing legal requirements, says CTA.

One new study hypothesizes that a reason medical records aren't being advertised on the underground markets is that cybercriminals are culling PII from the stolen records and selling it off separately.

Interfaith Medical Center deployed a variety of network security technologies to ward off ransomware and other attacks, virtualizing its servers in the process, which resulted in cost savings of more than $2 million over a seven-year period.